Architecture Cut 72 / Local Source Correction Dual Control

源图审计纠错双人确认 Dry-run

为源图发布审计 correction 事件生成双人确认 schema、角色矩阵、同人禁止和 approvalDigest。当前只读预演：approvalWritten=false，correctionEventWritten=false，auditLogMutated=false，rollbackPackageMutated=false。

Dual JSON 纠错事件纠错事务 MCP Queue MCP Document Citation Lookup 回滚包 BBS 双签范式

4双签 schema

4可校验

4同人禁止

4Approval 禁写

4approvalDigest

0实际写入

Dual Control Approval

发起人与复核人门禁

当前展示单资产/小范围双签详情。

双人确认 dry-run 可校验

元数据纠错 / 新加坡 S-REIT Harbor Block

AI / AI 回答脚注 / 批准发布 dry-run

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=opssamePersonForbidden=truesecondConfirmRequired=true

approvalDigest4890c1cacc84...994c6e

correctionDigest068cc5a3a22a...93c1fa

rollbackDigest90d904c9e4d7...5a7be6

dualControlDryRun=truedualControlWriteDisabled=trueapprovalWritten=falsecorrectionEventWritten=falseauditLogMutated=falserollbackPackageMutated=falsesessionCreated=falsemcpIndexWritten=falsetradingUseDisabled=true

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=true / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=false / review=false / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-sg-commercial-harbor-block-ai-assistant-approve-surface-release-dry-run",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-sg-commercial-harbor-block-ai-assistant-approve-surface-release-dry-run",
  "correctionDigest": "068cc5a3a22a2f21139d45b689792467bcd3d579b436701d5ccbc0a68993c1fa",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-sg-commercial-harbor-block-ai-assistant-approve-surface-release-dry-run",
  "targetAuditDigest": "27891667def7bc28d6d37be8d5d98f32d258e591a5d72645768e09444f81f443",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-sg-commercial-harbor-block-ai-assistant-approve-surface-release-dry-run",
  "targetRollbackDigest": "90d904c9e4d7b0c1e4e3cc318e70e131e092c5b3f1ced5c40780f7d8815a7be6",
  "actionDigest": "4beeb2ac69c949531adf1b0df66378fabea7fb9f1c1d8377239ed77a2e78336d",
  "releaseDigest": "ee7bcbf0fc5e443a92823a32dda9cea1efd0821cacccc9ff8d61550bfef30fde",
  "sourceManifestDigest": "e8697bcb7e114031877b80144f6ed05ae2ab204e09d6f55ac7176ed83df0635d",
  "correctionType": "metadata-correction",
  "consumer": "ai-assistant",
  "surface": "ai-answer",
  "initiatorRole": "qa",
  "reviewerRole": "ops",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

元数据纠错 / 新加坡 S-REIT Harbor Block

AI / AI 回答脚注 / 请求文案修复

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=qareviewer=opssamePersonForbidden=truesecondConfirmRequired=true

approvalDigest07a6b8b052b6...8f6d24

correctionDigesteb1e2b9964c9...2051f5

rollbackDigestd97adc392558...11af97

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-sg-commercial-harbor-block-ai-assistant-request-surface-copy-fix",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-sg-commercial-harbor-block-ai-assistant-request-surface-copy-fix",
  "correctionDigest": "eb1e2b9964c9a209b748257ac418629b90360b34c3081a8a5bd49b5f202051f5",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-sg-commercial-harbor-block-ai-assistant-request-surface-copy-fix",
  "targetAuditDigest": "f10c29558778f53bab17738c67f13b189ab7de5975fbe6870d0ae2836aec1b52",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-sg-commercial-harbor-block-ai-assistant-request-surface-copy-fix",
  "targetRollbackDigest": "d97adc392558160b5b0905868428ff5ec5d8bf858f7712e4212a7476b611af97",
  "actionDigest": "d55d0b2fc91b344e81ec3833e2971e8091b300cff7d070d66ae53f5b136a2e95",
  "releaseDigest": "ee7bcbf0fc5e443a92823a32dda9cea1efd0821cacccc9ff8d61550bfef30fde",
  "sourceManifestDigest": "e8697bcb7e114031877b80144f6ed05ae2ab204e09d6f55ac7176ed83df0635d",
  "correctionType": "metadata-correction",
  "consumer": "ai-assistant",
  "surface": "ai-answer",
  "initiatorRole": "qa",
  "reviewerRole": "ops",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

策略说明 / 新加坡 S-REIT Harbor Block

AI / AI 回答脚注 / 请求风控复核

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=opsreviewer=compliancesamePersonForbidden=truesecondConfirmRequired=true

approvalDigestc961a43074d4...3e00c5

correctionDigestdb8a8539da38...b64e2b

rollbackDigest2c0bb1c6b612...a705f6

Role Matrixops: initiate=true / review=true / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=false / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=false / review=false / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-sg-commercial-harbor-block-ai-assistant-request-risk-review",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-sg-commercial-harbor-block-ai-assistant-request-risk-review",
  "correctionDigest": "db8a8539da3855309d2328c045e799193c30e5faa9216c89c65fa840e6b64e2b",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-sg-commercial-harbor-block-ai-assistant-request-risk-review",
  "targetAuditDigest": "87a2655bfdec7be76bf10f99e5ca5787d251572933ccd4efb06f98a509bb5076",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-sg-commercial-harbor-block-ai-assistant-request-risk-review",
  "targetRollbackDigest": "2c0bb1c6b6122abd778df63e46fcfef3cf77635e6f6644da095b38b635a705f6",
  "actionDigest": "c1f16df848601cc9c4dd3c0e257393c47640901518f253a683d2ca6f842a43db",
  "releaseDigest": "ee7bcbf0fc5e443a92823a32dda9cea1efd0821cacccc9ff8d61550bfef30fde",
  "sourceManifestDigest": "e8697bcb7e114031877b80144f6ed05ae2ab204e09d6f55ac7176ed83df0635d",
  "correctionType": "policy-blocker-note",
  "consumer": "ai-assistant",
  "surface": "ai-answer",
  "initiatorRole": "ops",
  "reviewerRole": "compliance",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}

双签详情 Tx Fix Fix Queue Fix Document 纠错事件回滚包资产详情

双人确认 dry-run 可校验

Redaction 请求 / 新加坡 S-REIT Harbor Block

AI / AI 回答脚注 / 拒绝发布

Dual JSON

asset_visual_local_source_surface_release_audit_correction_approvalsinitiator=compliancereviewer=editorsamePersonForbidden=truesecondConfirmRequired=true

approvalDigest14e6dd349129...c8253e

correctionDigest37beb0a3e58d...7bc8c8

rollbackDigest735d9a87485c...b97678

Role Matrixops: initiate=true / review=false / 负责发起源图消费面纠错、核对回滚包和运营变更单，但不能绕过双人确认。qa: initiate=true / review=false / 负责 digest、source markers、consumer surface 与只读展示一致性复核。editor: initiate=true / review=true / 负责官网、BBS、AI 脚注和公开文案 redaction 口径复核。compliance: initiate=true / review=true / 负责 redaction、策略阻断、非投资建议和 no-trading 红线。admin: initiate=true / review=true / 可以填任一槽位，但不能绕过同人禁止、原审计不可变、原回滚包不可变和写入禁用。

{
  "table": "asset_visual_local_source_surface_release_audit_correction_approvals",
  "schemaVersion": "2026-07-local-source-surface-release-audit-correction-dual-control-v1",
  "approvalId": "asset-visual-local-source-surface-release-audit-correction-dual-control-sg-commercial-harbor-block-ai-assistant-reject-surface-release",
  "approvalType": "local-source-surface-release-audit-correction-dual-control",
  "correctionEventId": "asset-visual-local-source-surface-release-audit-correction-sg-commercial-harbor-block-ai-assistant-reject-surface-release",
  "correctionDigest": "37beb0a3e58d966a7569e78b331cee64c7f4bb7facbda81b3d2eab96407bc8c8",
  "targetAuditLogId": "asset-visual-local-source-surface-release-action-audit-sg-commercial-harbor-block-ai-assistant-reject-surface-release",
  "targetAuditDigest": "f6f24bad0b3734020779e14376fd389709ba2b5a20f1dee65bbdab3e9fbc2d33",
  "targetRollbackPackageId": "asset-visual-local-source-surface-release-rollback-sg-commercial-harbor-block-ai-assistant-reject-surface-release",
  "targetRollbackDigest": "735d9a87485ce86fd17ad4d537e5ba719e12749368a94bc9d42e79b9dfb97678",
  "actionDigest": "0c7f1de2fe5867527090fdf160f670ac4bbcf1b7387e42ff17a56431a10b0a84",
  "releaseDigest": "ee7bcbf0fc5e443a92823a32dda9cea1efd0821cacccc9ff8d61550bfef30fde",
  "sourceManifestDigest": "e8697bcb7e114031877b80144f6ed05ae2ab204e09d6f55ac7176ed83df0635d",
  "correctionType": "redaction-request",
  "consumer": "ai-assistant",
  "surface": "ai-answer",
  "initiatorRole": "compliance",
  "reviewerRole": "editor",
  "secondConfirmRequired": true,
  "samePersonForbidden": true,
  "originalAuditImmutable": true,
  "originalRollbackImmutable": true,
  "createdAt": "2026-07-31T18:33:40.903Z",
  "writeMode": "dry-run-only"
}

{
  "initiatorSlot": "local-source-correction-initiator",
  "reviewerSlot": "local-source-correction-reviewer",
  "futureIdentityProvider": "future:ops-sso + local-source-surface-release-actor-snapshot",
  "sessionStorage": "future:httpOnly-session + immutable correction approval snapshot",
  "proofRequiredBeforeWrite": true,
  "approvalWriteDisabled": true,
  "correctionWriteDisabled": true,
  "preserveAuditDigest": true,
  "preserveRollbackDigest": true,
  "noPublicSideEffect": true
}